[SECURITY-2101]

jenkinsci · Oct 29, 2020 · 783618f · 783618f
1 parent 25c71e5
commit 783618f
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/main/java/io/jenkins/plugins/aws/global_configuration/AwsManagementLink.java b/src/main/java/io/jenkins/plugins/aws/global_configuration/AwsManagementLink.java
@@ -14,7 +14,7 @@
 import org.jenkinsci.Symbol;
 import org.kohsuke.stapler.StaplerRequest;
 import org.kohsuke.stapler.StaplerResponse;
-import org.kohsuke.stapler.interceptor.RequirePOST;
+import org.kohsuke.stapler.verb.POST;
 
 import javax.annotation.CheckForNull;
 import javax.servlet.ServletException;
@@ -61,8 +61,9 @@ public Descriptor<AwsManagementLink> getDescriptor() {
         return Jenkins.get().getDescriptorOrDie(AwsManagementLink.class);
     }
 
-    @RequirePOST
+    @POST
     public synchronized void doConfigure(StaplerRequest req, StaplerResponse rsp) throws IOException, ServletException, Descriptor.FormException {
+        Jenkins.get().checkPermission(Jenkins.ADMINISTER);
         // for compatibility reasons, the actual value is stored in Jenkins
         BulkChange bc = new BulkChange(Jenkins.get());
         try{